NVD Vulnerability Detail

CVE-2015-7549

Summary	The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.
Publication Date	Oct. 30, 2017, 11:29 p.m.
Registration Date	Jan. 26, 2021, 2:56 p.m.
Last Update	Nov. 21, 2024, 11:36 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:qemu:qemu::r1::::::*					2.5.0

Related information, measures and tools

No	URL	タグ
1	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=43b11a91dd861a946b231b89b754285
2	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=43b11a91dd861a946b231b89b754285
3	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175380.html	Issue Tracking Third Party Advisory
4	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175380.html	Issue Tracking Third Party Advisory
5	http://www.debian.org/security/2016/dsa-3471	Issue Tracking Third Party Advisory
6	http://www.debian.org/security/2016/dsa-3471	Issue Tracking Third Party Advisory
7	http://www.openwall.com/lists/oss-security/2015/12/14/2	Issue Tracking Mailing List Third Party Advisory
8	http://www.openwall.com/lists/oss-security/2015/12/14/2	Issue Tracking Mailing List Third Party Advisory
9	http://www.securityfocus.com/bid/80761	Third Party Advisory VDB Entry
10	http://www.securityfocus.com/bid/80761	Third Party Advisory VDB Entry
11	https://bugzilla.redhat.com/show_bug.cgi?id=1291137	Issue Tracking Third Party Advisory
12	https://bugzilla.redhat.com/show_bug.cgi?id=1291137	Issue Tracking Third Party Advisory
13	https://security.gentoo.org/glsa/201602-01	Issue Tracking Third Party Advisory
14	https://security.gentoo.org/glsa/201602-01	Issue Tracking Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-476	NULL ポインタデリファレンス	https://cwe.mitre.org/data/definitions/476.html

JVN Vulnerability Information

QEMU における NULL ポインタデリファレンスに関する脆弱性

Title	QEMU における NULL ポインタデリファレンスに関する脆弱性
Summary	QEMU (別名 Quick Emulator) には、NULL ポインタデリファレンスに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 25, 2015, midnight
Registration Date	Nov. 22, 2017, 4:59 p.m.
Last Update	Nov. 22, 2017, 4:59 p.m.

Affected System

Fabrice Bellard

QEMU

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-7549	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7549
National Vulnerability Database (NVD)
2	CVE-2015-7549	https://nvd.nist.gov/vuln/detail/CVE-2015-7549

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-476	http://cwe.mitre.org/data/definitions/476.html

ベンダー情報

No	Name	URL
Debian Security Advisory
1	DSA-3471	https://www.debian.org/security/2016/dsa-3471
QEMU
2	msix: implement pba write (but read-only)	https://git.qemu.org/?p=qemu.git;a=commit;h=43b11a91dd861a946b231b89b754285
Red Hat Bugzilla
3	Bug 1291137	https://bugzilla.redhat.com/show_bug.cgi?id=1291137

Change Log

No	Changed Details	Date of change
0	[2017年11月22日] 掲載	Feb. 17, 2018, 10:37 a.m.